According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in     the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the     released memory is used (use-after-free). (CVE-2021-33640)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートの Fedora 36 ホストには、FEDORA-2022-ccc68b06cc のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - tar_close() の後に、libtar.c はポインター t が指すメモリを解放します。tar_close() が list() 関数で呼び出された後、ポインター t が使用され続けます: free_longlink_longname(t->th_buf)。その結果、解放されたメモリが使用されます (use-after-free)。(CVE-2021-33640)

  - ヘッダー構造体のサイズが 0 の細工された tar ファイルを送信する攻撃者が、変数 gnu_longlink に対する malloc(0) の呼び出しをトリガーし、領域外読み取りを引き起こす可能性があります。(CVE-2021-33643)

  - ヘッダー構造体のサイズが 0 の細工された tar ファイルを送信する攻撃者が、変数 gnu_longname に対する malloc(0) の呼び出しをトリガーし、領域外読み取りを引き起こす可能性があります。(CVE-2021-33644)

  - th_read() 関数は、メモリ割り当て後に変数 t-> th_buf.gnu_longlink を解放しません。これにより、メモリリークが発生する可能性があります。(CVE-2021-33645)

  - th_read() 関数は、メモリ割り当て後に変数 t->th_buf.gnu_longname を解放しません。これにより、メモリリークが発生する可能性があります。(CVE-2021-33646)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-88772d0a2d advisory.

    - fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ccc68b06cc advisory.

    - fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in     the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the     released memory is used (use-after-free). (CVE-2021-33640)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. (CVE-2021-33643)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. (CVE-2021-33644)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak. (CVE-2021-33645)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak. (CVE-2021-33646)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33640 advisory.

  - After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in     the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the     released memory is used (use-after-free). (CVE-2021-33640)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in     the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the     released memory is used (use-after-free). (CVE-2021-33640)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. (CVE-2021-33643)

  - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an     calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. (CVE-2021-33644)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longlink after allocating memory, which may     cause a memory leak. (CVE-2021-33645)

  - The th_read() function doesn't free a variable t->th_buf.gnu_longname after allocating memory, which may     cause a memory leak. (CVE-2021-33646)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
172304	EulerOS 2.0 SP9 : libtar (EulerOS-SA-2023-1473)	Nessus	Huawei Local Security Checks	2023/3/8	2023/3/8	critical
169344	Fedora 36: libtar (2022-ccc68b06cc)	Nessus	Fedora Local Security Checks	2022/12/28	2024/11/14	critical
211208	Fedora 37 : libtar (2022-88772d0a2d)	Nessus	Fedora Local Security Checks	2024/11/14	2024/11/14	critical
169344	Fedora 36 : libtar (2022-ccc68b06cc)	Nessus	Fedora Local Security Checks	2022/12/28	2024/11/14	critical
172714	EulerOS 2.0 SP10 : libtar (EulerOS-SA-2023-1554)	Nessus	Huawei Local Security Checks	2023/3/19	2023/3/19	critical
173364	EulerOS 2.0 SP11 : libtar (EulerOS-SA-2023-1585)	Nessus	Huawei Local Security Checks	2023/3/24	2023/3/24	critical
173368	EulerOS 2.0 SP11 : libtar (EulerOS-SA-2023-1575)	Nessus	Huawei Local Security Checks	2023/3/24	2024/1/16	critical
177207	EulerOS Virtualization 3.0.6.0 : libtar (EulerOS-SA-2023-2224)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	critical
172853	CBL Mariner 2.0 Security Update: libtar (CVE-2021-33640)	Nessus	MarinerOS Local Security Checks	2023/3/20	2025/2/10	critical
171144	EulerOS 2.0 SP8 : libtar (EulerOS-SA-2023-1324)	Nessus	Huawei Local Security Checks	2023/2/8	2023/2/8	critical
172283	EulerOS 2.0 SP9 : libtar (EulerOS-SA-2023-1448)	Nessus	Huawei Local Security Checks	2023/3/8	2023/3/8	critical
172709	EulerOS 2.0 SP10 : libtar (EulerOS-SA-2023-1529)	Nessus	Huawei Local Security Checks	2023/3/19	2023/3/19	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical